Log Intelligent Detection¶
Based on intelligent detection algorithms, monitor the log data generated by collectors within the workspace. Intelligently identify anomalies such as sudden increases/decreases in log volume and sudden increases in error logs, promptly detecting abnormal states that do not meet expectations.
Use Cases¶
- Most suitable for IT monitoring scenarios such as code anomalies or task scheduling detection. For example, monitoring sudden increases in error logs.
Detection Configuration¶
-
Define the monitor name.
-
Select the detection dimension: Supports detection by Source (By Source) or by Service (By Service), automatically matching the detection dimension selected by the user.
-
Select the detection scope: Filter the data of the detection metrics based on the labels of the metrics, limiting the data range for detection. Supports adding one or more label filters. If no filter is added, all log data will be detected.
View Events¶
The monitor will retrieve the log metrics from the last 10 minutes. When sudden increases/decreases in log volume or sudden increases in error logs are detected, corresponding events will be generated. You can view these abnormal events in the Events > Intelligent Monitoring list.
Event Details Page¶
Click Event to view the details of the intelligent monitoring event, including the event status, abnormal occurrence time, abnormal name, analysis report, alert notifications, historical records, and related events.
-
Click Jump to Monitor in the upper right corner to view and adjust the Intelligent Monitor Configuration.
-
Click the Export button in the upper right corner to support exporting JSON File and PDF File, thus obtaining all key data corresponding to the current event.
Analysis Report
-
Abnormal Summary: View the current abnormal log labels, detailed abnormal analysis report, and distribution of error requests.
-
Error Analysis: View clustering information of error logs.
Note: When multiple interval anomalies exist, the Abnormal Summary > Abnormal Value Distribution Chart and Abnormal Analysis dashboard default to displaying the analysis of the first interval anomaly. You can click the [Abnormal Value Distribution Chart] to switch, and the abnormal analysis dashboard will synchronize accordingly.